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Abstract. This paper presents a cut-elimination proof for the logic LG", which is an extension of a 
proof system for encoding generic judgments, the logic FOX'^^ of Miller and Tiu, with an induction 
principle. The logic LC^ , just as FOX^^ , features extensions of first-order intuitionistic logic with 
fixed points and a "generic quantifier", V, which is used to reason about the dynamics of bindings in 
object systems encoded in the logic. A previous attempt to extend FOX^"^ with an induction principle 
has been unsuccessful in modeling some behaviours of bindings in inductive specifications. It turns 
out that this problem can be solved by relaxing some restrictions on V, in particular by adding the 
axiom B = Vx.-B, where x is not free in B. We show that by adopting the equivariance principle, the 
presentation of the extended logic can be much simplified. This paper contains the technical proofs for 
the results stated in [14]; readers are encouraged to consult [14] for motivations and examples for LG". 

1 Introduction 

This work aims at providing a framework for reasoning about specifications of deductive systems using higher- 
order abstract syntax [10]. Higher-order abstract syntax is a declarative approach to encoding syntax with 
bindings using Church's simply typed A-calculus. The main idea is to support the notions of a-equivalence 
and substitutions in the object syntax by operations in A-calculus, in particular a-conversion and /9-reduction. 
There are at least two approaches to higher-order abstract syntax. The functional programming approach 
encodes the object syntax as a data type, where the binding constructs in the object language are mapped 
to functions in the functional language. In this approach, terms in the object language become values of 
their corresponding types in the functional language. The proof search approach encodes object syntax as 
expressions in a logic whose terms are simply typed, and functions that act on the object terms are defined 
via relations, i.e., logic programs. There is a subtle difference between this approach and the former; in the 
proof search approach, the simple types are inhabited by well-formed expressions, instead of values as in 
the functional approach (i.e., the abstraction type is inhabited by functions). The proof search approach is 
often referred to as X-tree syntax [7], to distinguish it from the functional approach. This paper concerns the 
A-tree syntax approach. 

Specifications which use A-tree syntax are often formalized using hypothetical and generic judgments 
in intuitionistic logic. It is enough to restrict to the fragment of first-order intuitionistic logic whose only 
formulas are those of hereditary Harrop formulas, which we will refer to as the HH logic. Consider for instance 
the problem of defining the data type for untyped A-terms. One first introduces the following constants: 

app : tm tm tm abs : [tm — > tm) — > tm 

where the type tm denotes the syntactic category of A-terms and app and abs encode application and 
abstraction, respectively. The property of being a A-term is then defined via the following theory: 



/\M f\ N{lam M A lam N lam {app M N)) & 
f\ M {{/\ x.lam X =^ lam {M x)) =^ lam {abs M)) 



where f\ is the universal quantifier and ^ is implication. 



Reasoning about object systems encoded in HH is reduced to reasoning about the structure of proofs in 
HH. McDowell and Miller formalize this kind of reasoning in the logic FO\^^ [3], which is an extension 
of first-order intuitionistic logic with fixed points and natural numbers induction. This is done by encoding 
the sequent calculus of HH inside FO\^^ and prove properties about it. We refer to HH as object logic 
and FOX^^ as meta logic. McDowell and Miller considered different styles of encodings and concluded that 
explicit representations of hypotheses and, more importantly, eigenvariables of the object logic are required 
in order to capture some statements about object logic provability in the meta logic [4]. One typical example 
involves the use of hypothetical and generic reasoning as follows: Suppose that the following formula is 
provable in HH . 

x.p X s l\^y.pyt ^ pxt. 

By inspection on the inference rules of HH, one observes that this is only possible if s and t are syntactically 
equal. This observation comes from the fact that the right introduction rule for universal quantifier, reading 
the rule bottom-up, introduces new constants, or eigenvariables. The quantified variables x and y will be 
replaced by distinct eigenvariables and hence the only matching hypothesis for pxt would be pxs, and 
therefore s and t has to be equal. Let \-hh P denote the provability of the formula F in HH. Then in the 
meta logic, we would want to be able to prove the statement: 

ys\ft.{\-HH l\x.pxs ^ ^y.pyt ^ pxt) D s = t. 

The question is then how we would intrepret the object logic eigenvariables in the meta logic. It is demon- 
strated in [5 that the existing quantifiers in FOX^^ cannot be used to capture the behaviours of object 
logic eigenvariables directly. McDowell and Miller then resort to a non-logical encoding technique (in the 
sense that no logical connectives are used) which has some similar flavor to the use of deBruijn indices. The 
use of this encoding technique, however, has a consequence that substitutions in the object logic has to be 
formalized explicitly. 

Motivated by the above mentioned limitation of FOX'^^ , Miller and Tiu later introduce a new quantifier 
V to FOX'^^ which allows one to move the binders from the object logic to the meta logic. A generic 
judgment in the object logic, for instance \~hh f\x.Gx is reflected in the meta logic as Vx. \-hh Gx. This 
meta logic, called FOX^"^ [Sj, allows one to perform case analyses on the provability of the object logic. Tiu 
later extended FOX^"^ with induction and co-induction rules, resulting in the logic Line [13'. However, some 
inductive properties about the object logic are not provable in Line. For example, the fact that \-hh A x.G x 
implies Vi. \~hh Gt (that is, the extensional property of universal quantification) is not provable in Line. As 
it is shown in ^13] . this is partly caused by the fact that B = Vx.B, where x is not free in B, is not provable 
in Line or FOA^^ . In this paper we present the logic LG^ , which is an extension of FOX^"^ with natural 
number induction and with the axiom schemes: 

\/x\7y.B xy D VyS/x.B xy and B = Vx.B (1) 

where x is not free in B in the second scheme. We show that inductive properties of A-tree syntax specifications 
can be stated directly and in a purely logical fashion, and proved in LG". 



Relation to nominal logic In formulating the proof system for LG'^ , it turns out that we can simplify the 
presentation a lot if we adopt the idea of equivariant predicates from nominal logic [TT] . That is, provability 
of a predicate is invariant under permutations of names. This is technically done by introducing a countably 
infinite set of name constants into the logic, and change the identity rule of the logic to allow equivalence 
under permutations of name constants: 

TT.B = n'.B' . 
r,B'-B' 

where tt and vr' are permutations on names. LG'^ is in fact very close to nominal logic, when we consider 
only the behaviours of logical connectives. In particular, the quantifier V in LG'^ shares the same properties, 
in relation to other connectives of the logic, with the 1/1 quantifier in nominal logic. However, there are two 
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important differences in our approach. First, we do not attempt to redefine a-conversion and substitutions in 
LG^ in terms of permutations (or swapping) and the notion oi freshness as in nominal logic. Name swapping 
and freshness constraints are not part of the syntax of LG". These notions are present only in the nieta 
theory of the logic. In LG^ , for example, variables are always considered to have empty support, that is, 
TT.a; = X for every permutation tt. This is because we restrict substitutions to the "closed" ones, in the sense 
that no name constants can appear in the substitutions. A restricted form of open substitutions can be 
recovered indirectly at the meta theory of LG". The fact that variables have empty support allows one to 
work with permutation free formulas and terms. So in LG^ , we can prove that p x a D p x b, where a and b 
are names, without using explicit axioms of permutations and freshness. In nominal logic, one would prove 
this by using the swapping axiom p x a D p {{a b).x) ((a b).b), where (a b) denotes a swapping of a and b, 
and then show that (a b).x = x. The latter might not be valid if x is substituted by a, for example. The 
validity of this formula in nominal logic would therefore depend on the assumption on the support of x. 

The second difference between LG'^ and nominal logic is that LG'^ allows closed terms (again, in the 
sense that no name constants appear in them) of type name, while in nominal logic, allowing such terms 
would lead to an inconsistent theory in nominal logic [llj . As an example, the type tm in the encoding of 
A-terms mentioned previously can be treated as a nominal type in LG'^ . This has an important consequence 
that we do not need to redefine the notion of substitutions for the encoded A-terms. For example, we can 
define the (lazy) evaluation relation on untyped A-terms as the theory: 

eval {abs M) {abs M) = T 
eval {app M N) V = eval M {abs P) A eval {P N) V 

without having to explicitly define substitutions on terms of type tm inside LG^ . Substitutions in the object 
language in this case is modelled by /3-reduction in the meta-language of LG'^ . 

Outline of the paper Section [5] introduces the logic LG, which is an extension of first order intuitionistic logic 
with a notion of name permutation and the V-quantifier. LG serves as the core logic for a more expressive 
logic, LG", which is obtained by adding rules for fixed points, equality and induction to LG. Section [3] 
examines several properties of derivations, in particular, those that concern preservation of provability under 
several operations on sequents, e.g., substitutions. Section |4] defines the cut reduction, used in the cut- 
elimination proof. The cut elimination proof itself is an adaptation of the cut-elimination proof of FOX'^^ by 
McDowell and Miller [3], which makes use of the reducibility technique. Section [5] defines the normalizability 
and the reducibility relations which are crucial to the cut elimination proof in Section[6l Finally, in Section[7l 
we show that the proof system LG is actually equivalent to FOX'^^ (without fixed points and equality) with 
non-logical rules corresponding to the axioms given in ([1]) above. 

This paper contains the technical proofs for the results stated in [T3]; readers are encouraged to consult 
[H] for motivations and examples for LG'^ . 

2 A logic for generic judgments 

We first define the core fragment of the logic LG'^ which does not have fixed point rules or induction. The 
starting point is the logic FOX"^ introduced in [8J. FOX^ is an extension of a subset of Church's Simple 
Theory of Types in which formulas are given the type o. The core fragment of LG'^ , which we refer to as 
LG, shares the same set of connectives as FOX^ , namely, _L, T, A, V, D, Vt, 3t and Vr- The type r in the 
quantifiers is restricted to that which does not contain the type o. Hence the logic is essentially first-order. 
We abbreviate {B D C) A {C D B) aa B = C. 

The sequents of i^OA*^^ are expressions of the form 

S; ai > Bi, . . . , (Tn > Bn >- (To > Bo 

where 17 is a signature, i.e., a set of eigenvariables scoped over the sequent and ai is a local signature, i.e., list 
of variables locally scoped over Bi. The introduction rules for V, reading the rules bottom- up, introduce new 
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local variables to the local signatures, just as the right introduction rule of V introduces new eigenvariables to 
the signature. The expression Ui > Bi is called a local judgment, and is identified up to renaming of variables 
in ai. This enforces a limited notion of equivariance: for example a>pa •- bt>pb is provable, since both local 
judgments are equivalent up to renaming of local signatures. However, the judgments (a, c) t> pa and bt> pb 
are considered distinct judgments, and so arc {a,b) > q ab and (6, a) > qab. These restrictions are relaxed in 



The sequent presentation of LG can be simplified, that is, without using the local signatures, if we employ 
the equivariance principle. For this purpose, we introduce a distinguished set of base types, called nominal 
types, which is denoted with TV. Nominal types are ranged over by u. We restrict the V quantifier to nominal 
types. For each nominal type l e AA, we assume an infinite number of constants of that type. These constants 
are called nominal constants. We denote the family of nominal constants by Cj^. The role of the nominal 
constants is to enforce the notion of equivariance: provability of formulas is invariant under permutations 
of nominal constans. Depending on the application, we might also assume a set of non-nominal constants, 
which is denoted by K,. 

We assume the usual notion of capture- avoiding substitutions. Substitutions are ranged over by 9 and 
p. Application of substitutions is written in a postfix notation, e.g., tO is an application of 9 to the term t. 
Given two substitutions 9 and 9' , we denote their composition \yy 9 o9' which is defined as t{9 o 9') = {t9)9' . 
A signature is a set of variables. A substitution 9 respects a given signature U if there exists a set of typed 
variables E' such that for every a; : r in the domain of 9, it holds that ICU U' h 9{x) : r. We denote by S9 
the minimal set of variables satisfying the above condition. We assume that variables, free or bound, are of 
a different syntactic category from constants. 

Definition 1. A permutation on Cjsf is a bisection from C^f to Cj^ . The permutations on Cj\f are ranged over 
by TT. Application of a permutation t: to a nominal constant a is denoted with 7r(a). We shall be concerned 
only with permutations which respect types, i.e., for every a : l, n(a) : t. Further, we shall also restrict to 
permutations which are finite, that is, the set {a \ 7r(a) ^ a} is finite. Application of a permutation to an 
arbitrary term (or formula), written ir.t, is defined as follows: 



A permutation involving only two nominal constants is called swapping. We use (a b), where a and b are 
constants of the same type, to denote the swapping {a t-^ b,b ^ a}. 

The support of a term (or formula) t, written supp{t), is the set of nominal constants appearing in it. It is 
clear from the above definition that if supp{t) is empty, then -K.t = t for all tt. The definition of iT-substitution 
implies that for every 9 and for every x G dom{9), 9{x) has empty support. Therefore iT-substitutions and 
permutations commute, that is, {■K.t)9 = ■K.{t9). 

A sequent in LG^ is an expression of the form Z"; _r C where 17 is a signature. The free variables of F 
and C are among the variables in S. The inference rules for the core fragment of LG", i.e., the logic LG, is 
given in Figure[TJ In the rules, the typing judgment S, IC,C^ \- t : t denotes the typability of i : r, given the 
typing context U /C U in Church's simple type system. 

In the V£ and rules, a denotes a nominal constant. In the 3C and rules, we use raising [6\ to 
encode the dependency of the quantified variable on the support of B, since we do not allow Z'-substitutions 
to mention any nominal constants. In the rules, the variable h has its type raised in the following way: 
suppose c is the list ci : ti, . . . , c„ : i„ and the quantified variable x is of type r. Then the variable h is of 
type: ti — s- t2 — ^ . . . — > t„ ^ r. This raising technique is similar to that of FOX"^"^ , and is used to encode 
explicitly the minimal support of the quantified variable. Its use prevents one from mixing the scopes of V 
(dually, 3) and V. That is, it prevents the formula ^xVy.pxy = Vy^x.pxy, and its dual, to be proved. 

Looking at the introduction rules for V and 3, one might notice the asymmetry between the left and 
the right introduction rules. The left rule for V allows instantiations with terms containing any nominal 
constants while the raised variable in the right introduction rule of V takes into account only those which 
are in the support of the quantified formula. However, we will see that we can extend the dependency of the 



LG. 



Tr.a = '!r{a), ifa€Cj\f. 
TT.{M N) = (vr.Af) (TT.iV) 



TT.C = c, if Cj^f. 

TT.{Xx.M) = \x.{tt.M) 



ir.x = X 
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raised variable to an arbitrary number of fresh nominal constants not in the support without affecting the 
provability of the sequent (see Lemma [T7l and Lemma flS]). 



TT.B = n'.B' E-Ai>-Bi ■■■ X';Z\„>-B„ T; 5i, . . . , 5,,, T ^ C E;r,B,B^~C 



±C -FT— T7^ 



E-r,±^~ c E-r •-T 
E;r,Bi>-C ^. E-r^B E-r>-c 

^C,^£{l,2} ^ . p , ^ — A7^ 



E;r,Bi AB2 •- C ' - L , J E;r>- BAC 

E;r,B --C E;r,Dy-C E-F >- Bi , , 

E.r^B^D^c r;r^i?.vi?. 

E-r >- B E-r,D>~C E;r,B f-C 

— ■ ■ — ■ ~> C ■ — ■ T Tl 

E;r,BZ) D '-C E-T'-BdC 

E,lC,CM^t:T E-r,B\t/x]'-C E,h-r B\hc/x] 

E;r,B[a/x]>- C E;r>-B\a/x] 
E;r,Vx.B\-C " ^ ^'^^^(^^ E;r^Vx.B " ^ ^"^^'^^^ 

E,h;r,B\hc/x] ^ C E,K.,CM^t:T E;r B\t/x\ 



Fig. 1. The inference rules of LG 



We now extend the logic LG with a proof theoretic notion of equality and fixed points, following on works 
by Hallnas and Schroeder-Heister |2|12j . Girard [1] and McDowell and Miller [3j. The equality rules are as 
follows: 

{s0;re^Ge \ {Xc.t)e iXc.s)e} 

2j; 1 ,s — t I- C E; 1 t- t = t 

where supp{s = t) = {c\ in the cqC rule. In the eq£ rule, the substitution 9 is a unifier of Xc.s and Xc.t. We 
specify the premise of the rule as a set to mean that every element of the set is a premise. Since the terms s 
and t can be arbitrary higher-order terms, in general the set of their unifiers can be infinite. However, in some 
restricted cases, e.g., when Xc.s and Xc.t are higher-order pattern terms [519] . if both terms are unifiable, 
then there exists a most general unifier. The applications we are considering are those which satisfy the 
higher-order pattern restrictions. 

Definition 2. To each atomic formula, we associate a fixed point equation, or a definition clause, following 

the terminology of FOX'^^ . A definition clause is written '^x.px = B where the free variables of B are among 
X. The predicate px is called the head of the definition clause, and B is called the body. A definition is a 
set of definition clauses. We often omit the outer quantifiers when referring to a definition clause. 

The introduction rules for defined atoms are as follows: 

S; r, B[t/x] t-G ^ S;r>- B[t/x] ^ 

In order to prove the cut-elimination theorem and the consistency of LG'^ , we allow only definition clauses 
which satisfy an equivariance preserving condition and a certain positivity condition, so as to guarantee the 
existence of fixed points. 

Definition 3. We associate with each predicate symbol p a natural number, the level of p. Given a formula 
B, its level lvl{B) is defined as follows: 
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1. lvl{pt) = lvl{p) 

2. lvli±) = lvl{T) = 

3. lvl{B AC) = lvl{B V C) = max{lvl{B), lvl{C)) 

4. lvl{B dC)= ina^{lvl{B) + 1, lvl{C)) 

5. IvUyx.B) = IvKyx.B) = lvl{3x.B) = lvl{B). 

A definition clause px = B is stratified iflvl{B) < lvl{p) and B has no free occurrences of nominal constants. 
We consider only definition clauses which are stratified. 

An example that violates the first restriction in Definition [3] is the definition p = p Z) -L. In [T^], Schroeder- 
Heister shows that admitting this definition in a logic with contraction leads to inconsistency. To see why we 

need the second restriction on name constants, consider the definition qx = (x = a), where a is a nominal 
constant. Let 6 be a nominal constant different from a. Using this definition, we would be able to derive _L: 

1 r 

««7r — -, ; — dctC 



- eqJZ qa I- qb qb >- 1. 

defn 77r:—\ ^ut 



qa qa t- 1. 

; cut 

I _L 

In examples and applications, we often express definition clauses with patterns in the heads. Let us 
consider, for example, a definition clause for lists. We first introduce a type 1st to denote lists of elements of 
type a, and the constants 

nil : 1st :: : a — > 1st — > 1st 

which denote the empty list and a constructor to build a list from an element of type a and another list. 
The latter will be written in the infix notation. The definition clause for lists is as follows. 

list L = nil V 3aA3istL'.L = {A :: L') A list L' . 

Using patterns, the above definition of lists can be rewritten as 

list nil = T. list [A :: L) = list L. 

We shall often work directly with this patterned notation for definition clauses. For this purpose, we 

introduce the notion of patterned definitions. A patterned definition clause is written Vx.H = B where the 
free variables of H and B are among x. The stratification of definitions in Definition [3] applies to patterned 
definitions as well. Since the patterned definition clauses are not allowed to have free occurrences of nominal 
constants, in matching the heads of the clauses with an atomic formula in a sequent, we need to raise the 
variables of the clauses to account for nominal constants that are in the support of the introduced formula. 

Given a patterned definition clause Vxi . . .\/Xn-H = B its raised clause with respect to the list of constants 
ci : ii . . . c„ : i„ is 

V/ll . . .Vhn.H[hi c/xi, . . . ,hn c/Xn] = B[hi c/xi, . . . ,hn c/Xn]- 

The introduction rules for patterned definitions are 

{Se;B0,re >- C9}e S;r>-B9 

S;A,r^C ^"^-^ S;r^A ^^^^ 

In the defjC rule, B is the body of the raised patterned clause Vxi . . .Mx^.H = B and {Xc.H)9 = {X<;.A)9 
where {c} is the support of A. In the defTZ rule, we match A with the head of the clause, i.e., Xc.A = {Xc.H)9. 
These patterned rules can be derived using the non-patterned definition rules and the equality rules, as shown 
in m. 
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Natural number induction. We introduce a type nt to denote natural numbers, with the usual constants 
z : nt (zero) and s : nt —>■ nt (the successor function), and a special predicate nat : nt ^ nt —> o. The rules 
for natural number induction are the same as those in FOX^^ [3 , which are the introduction rules for the 
predicate nat. 

^Dz j-Dj^D{sj) U;r,DI^C 



E\ r, nat 1 1- C 



natC 



S;r t- nat I 
natTZ „ ^ —} — -r natTZ 



S; r >- nat z E; F >- nat (s /) 

The logic LG extended with the equality, definitions and induction rules is referred to as FC^. 



3 Properties of derivations 

In this section we examine several properties of the V-quantifier and derivations in LG" that are useful in the 
cut elimination proof. These properties concern the transformation of derivations, in particular, they state 
that provability is preserved under Z'-substitutions, permutations and a restricted form of name substitutions. 

We first look at the properties of the V quantifier in relation to other connectives. The proof of the 
following proposition is straightforward by inspection on the rules of FG. 

Proposition 4. The following formulas are provable in FG: 

1. Vx.{Bx A Cx) = Vx.Bx A Vx.Cx. 

2. Vx.{Bx D Cx) = Vx.Bx D Vx.Cx. 

3. Vx.{Bx V Cx) = Vx.Bx V Vx.Cx. 

4- Vx.-B = B, provided that x is not free in B . 

5. VxVy.Bxy = VyVx.Bxy. 

6. \fx.Bx D \Ix.Bx. 

7. Vx.Bx D 3x.Bx. 

The formulas (1) - (3) are provable in FOX^ . The proposition is true also in nominal logic with V replaced 
by V\. 

Definition 5. Given a derivation 77 with premise derivations {77i}igx where X is some index set, the mea- 
sure ht{n), the height of F, is defined as the least upper bound of {ht{ni) + 

We now define some transformations of derivations: weakening of hypotheses, substitutions on derivations, 
permutations and restricted name substitutions. In the following definitions we omit the signatures in the 
sequents if it is clear from context which signatures we refer to. We denote with id the identity function on 
Cat- 

Definition 6. Weakening of hypotheses. Let U be a derivation of S; F t- C. Let A be a multiset of formulas 
whose free variables are among S . We define the derivation w{A, LI) of S; F, A i- C as follows: 

1. If II ends with eq£ 

770 1 
-C0\ . 

eq£ 



S6-F'e C0}^ 
S;s = t,F' '^C 
then w{A, 77) is 

w{Ae,ne) 

E9;F'9,Ae >- C6 



E;s = t,F',Af~ C 



eq£ 
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2. If n ends with natC 

ill il2 ils 

>- D z Di'- D (si) D I,r' i-C 

nat I,r'^C ""^^ 

then iu{A,n) is 

77i V72 w{A,n3) 

•-D z Di^D {si) D I,r',A>-C 

nat I,r',A'-C 



3. If n ends with the mc rule 



Hi 7T„ 77' 

A^^B^ ... An^Bn Bi,...,Bn,r^ C 

Ai,...,A^,r' 



mc 



then 'w{A, 11) is 

ill iin w{A,n') 

A^^Bi ... A n'- B„ B,....,Bn,r',A'-C 

^1, 



mc 



4. If II ends with any other rule and has premise derivations iJi, . . . , 7J„ then w{A, 11) ends with the same 
rule with premise derivations w{A, Iln), . . . , w{A, Tin). 

Definition 7. Substitutions on derivations. If 11 is a derivation of S;r C and is a S -substitution, 
then we define the derivation 116 of S9; »- CO as follows: 



1. Suppose n ends with eq£; 



^ eqC 



E;s = t,r i-C 

where each p is a unifier of Xc.s and Xc.t. Observe that if p' is a unifier of {Xc.s)9 and {Xc.t)9, then 9 op' 
is a unifier of Xc.s and Xc.t. Thus 119 is the derivation: 



r neop' \ 
\E0p';A9p^C0pi^, 

E; s9 = t9, A9 >- CO 



eq£ 



2. Suppose n ends with MTZ: 



ill 

S-r^B[hc/x\ 
E:r>- yx.B 



where {c} = supp{\/x.B). Let {d} be the support of {\/x.B)9, which might be smaller than {c}. Let p be the 
substitution [Xc.h'd/h] where h' is a new variable not already in S and not among the free variables in 6. 
We can assume without loss of generality that x is not free in 9, hence {{B[hc/x\)p)9 = {B[h' d/x])9 = 
{BO)[h'd/x]. Then nO is 

Blip o 9) 
E9,h';r9 i- iB9)[h'd/x] 



S9; r9 i- {\/x.B)9 



Mil 



3. Suppose n ends with 3C: this case is dual to the previous one. 

4. If n ends with any other rule and has premise derivations IIi,.. . ,IIn, then 119 ends with the same rule 
and has premise derivations TTi^,. . . , iJ„0. 
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Definition 8. Let U be a proof of S; Bi, . . . , _B„ i- Bq and Zet tt = ttq , . . . , 7r„ be a list of permutations. We 
define a derivation (tt).!! of S; tti.Bi, . . . , iTn.Bn ■- ttq-Bq as follows: 

1. Suppose that U ends with id^ 

TV.Bj = it' .Bn 

id 

S;Bi, . . . ,Bn t- Bq . 

Obverse that tt.'kJ'^ .-kj.B = tt'.ttq^.tto.B'. Hence (tt).!! ends with the same rule. 

2. Suppose n ends with mc: 

Bi 77,„ n' 

Ait-Di ... Am*- Dm Dl,...,Dm,^m+l'- Bq 
Bl, . . . ,Bn I- Bq 



mc 



where Ai, . . . , Am+i are partitions of Bi, . . . , Bn- Suppose that for each i G {1, . . . ,m + 1}, Ai = 
Bii, . . . , Bik- for some index ki. Let n{i), for i G {1, • • • be the permutations irf, 7r,i, • • • , Trjfe.. Let 

7f(m + 1) be the permutations 

TTo, id, ...,id, 7r(TO+i)i, . . .'!T(^rn+l)km+i 



We denote with A', the list 



Then (7f).iT is the derivation 



TVii.Bij, . . . ,7rjfc..i?i/c. . 



(7r(l)).7Ii (7r(m)).7T„ (tt (m + 1)).7T' 

A[-Di ... A'^-Dm Di,...,D^,A'^^^>-Tro.Bo 



TTl.-Bi, . . . jTVn.Bn ■- TTo-Bq 



mc 



3. Suppose n ends with VTZ: 



E;Bu...,Bn'- B[a/x] 
E;Bi,...,Br,'- V.x.B 



V7^ 



where a : l ^ supp{B). Let d : l be a nominal constant such that d ^ supp{B) and 7ro((i) = d. Such a 
constant exists since supp{B) is finite andno is a finite permutation. Thusno.{a d).Bo[a/x] = iro.Bold/x]. 
Then (7f).7I is the derivation: 



{TTo.{a d), . . . ,7r„).7Ji 

S;TTi.Bi,...,TTn.Bn '-'Ko.B[d/x] 



V7^ 



^. Suppose n ends with VC: this case is analogous to previous one. 
5. Suppose n ends with cL: 

77' 

By B,.B, ..../?„■- /?() 

— c£ 

B\, . .. , Bj, . . . ,Bn t- Bq 

then {n).LI is 

(tTi, . . . jTTjjTTj, . . . ,7r„).iT' 
ni.Bi, . . . ,'Kj.Bj,'Kj.Bj . . . ,'Kn.Bn t- TTq.Bq 

■Ki.Bi, . . . ,-Kj.Bj, . . . ,'Kn.Bn *- TTq.Bq 



cjC 



6. If n ends luith any other rule and, has premise derivations IIi, . . . , Ilrm then {tt).!! ends with the same 
rule and has premise derivations (7r).7Ii, . . . , (7f).I7m- 
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Definition 9. Let U be a proof of E,x : l; Bi, . . . , Bn Bq and let a ~ gq, . . . , a„ be a list of nominal con- 
stants such that ai ^ supp{Bi). We define a derivation r{x, (a), 77) of E] Bi[ai/x\, . . . , 73„[a„/a;] >- 7?o[ao/2;], 
as follows: 

1. Suppose 77 is 

n.B, = n'.Bo 

idTT 

S,x;Bi,...,Bn >- Bq " . 

Let d : L be a nominal constant which is not in the support of Bj and Bq, and 7r(rf) = d and n' {d) = d. 
Then r{x,a, LI) is 

7r.(aj d).Bi[ai/ x] = n' .{qq (i).73o[ao/a 



IJ;Bi[ai/x], . . .,Bn[an/x] t~ Bo[ao/x] 

2. Suppose LI ends with mc: 



id-„ 



III Hm 77' 

S,x;Ait-Di ... S,x;Am'-Djn S, x; Di, . . . , Dm, Am+i Bq 

mc 

S,x; Bi, . . . , Bn >- 7?o 

where Z\i, . . . , Am+i is a partition of 7?i, . . . , 73„. Suppose that for each i G {1, . . . , to + 1}, Ai = 
Bii, . . . , 7?ifc. for some index ki. Let d = di, . . . , dm be o, list of nominal constants such that di ^ supp{Di). 
Let f(i), for i G {1, . . . , m} be the list di, an, ... , Oik^ and let f{m + 1) be the list 

ao, d, a(^m+i)i, ■ ■ ■ , Q.(m+i)fe(„+i) ■ 

Let A[ be the list 

Bii[aii/x\,...,Bik^[aikJx\ 

and let F be the list 

Di[di/x\, D„\dm/x\,A'^_^^. 

Then r{x,d,n) is the derivation 

r{x,f{l),n^) r{x,f{m),nm) r{x, f{m + l),n') 

S;A'^^ D^[di/x\ ... S-A'^^Dm[am/x\ S-r^Bo[ao/x] 



E;Bi[ai/x\,. . .,Bn[an/x] >- Bo[ao/x] 



3. Suppose n is 



If aQ ^ c then r{x, a, 77) is 



Hi 

S,x;Bi, ...,Bn'- B[c/y] 
S,x;Bi,...,Bn >- Wy.B 



r{x,d,ni) 

S,x;Bi,...,Bn ^ B[c/y] 
S,x;Bi,...,Bn >- Vy.B 



VIZ 



If Co = c, then we swap c with a fresh constant. Let d : l be a nominal constant not in the support 
of B[c/y\. We apply the swapping (c d) to the conclusion of the end sequent of 7Ti according to the 
construction in Definition\B\ to get a proof 772 of S,x; Bi, . . . , 73„ i- BQ[d/y]. The derivation r(x, a, U) 
is constructed as follows: 



r{x,d,n2) 

E;Bi[ai/x], . . .,Bn[an/x] ■- B[aa/x,d/y] 
E; Bi[ai/x], ... , 73„[a„/x] ■- Vy.B[ao/x] 

4-. If n ends with apply the same construction as in the previous case 



VIZ 
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5. Suppose n ends with \/TZ 

m 

E,x,h;Bi,...,Bn ■- B[hc/y] 
E,x;Bi,...,Bn'-yy-B 

Let 9 = [Xc.h' cx/h] where h' is a variable not in S. Apply the construction in Definition^to get the 
proof n9 of 

S,x,h';Bi, . .. ,Bnt- B[h' ax/y] 

Then r{x, a, U) is 

r{x, a, 119) 

S,h';Bi[ai/x],...,Bn[an/x] >- B[ao/x,{h' cao)/y] 
E; Bi[ai/x], . . . , Bn[an/x] t-yy-BloQ/x] 

6. If n ends with 3C, apply the same construction as in the previous case. 

7. Suppose n ends with 3TZ: 



ill 

E,x;Bi,...,Bn'- B[t/y] 
S,x;Bi,...,Bn •- 3y.B 
If oq ^ supp{B[t / y\) then r{x, a, n) is 



3n 



r{x,a,ni) 

E;Bi[ai/x\, . . . ,Bn[an/x\ B[aa/x,t/y] 
S]Bi[ai/x\, . . .,Bn[an/x\ 3y.B[aa/x\ 



3n 



If oq G supp{B[t/y], we exchange it with a fresh constant. Let d be a nominal constant distinct from oq 
and not in the support of B[t/y]. Then ((ao d).B[t/y])[ao/x] = B[{ao d).t/y,ao/x]. We first apply the 
construction in Definition\^ to Ui to get a derivation 772 of S,x: Bi, . . . , Bn -B[(ao d).t/y, oq/x]. The 
derivation r(x, a, 77) is thus 



r{x,a,n2) 

S;Bi[ai/x], . . .,Bn[an/x] >- B[{ao d).t/y,ao/x] 
S;Bi[ai/x], . . . ,B[an/x] ■- 3y.B[ao/x] 

8. Suppose 77 ends with eq£; 



37^ 



Lie 

{S,x)9;B29,...,Bn9 ^ Bo9 

E,X] s = t, B2, . . ■ , Bn >- Bq 



eqC 



where each 9 is a unifier of (Ac.s, Ac.i) and {c} = supp{s ~ t). We need to show that for each unifier of 
(XaiXc.s[ai/x], XaiXc.t[ai/x]) there is a corresponding unifier for Xc.s and Xc.t. We can assume without 
loss of generality that x is not in the domain of p. 

We first show the case where x is not free in p. It is clear that in this case p is a unifier of Xc.s and 
Xc.t. Therefore we apply the procedure recursively to the premise derivation Tip, to get the derivation 
r{x,a,np) of 

Up; {B2[a2/x])p, {Bn[an/x])p {Bo[ao/x])p. 

In the other case, where x is free in the range of p, we show that it can be reduced to the previous case. 
First we define a substitution p' to be the substitution p where x is replaced by a new variable u which 
is not free in p. Clearly p' is also a unifier of XaiXc.s[ai/x\ and XaiXc.t[ai/ x\. Moreover, it is more 
general than p, since p = [x/u] o p' . Therefore we can apply the construction in the previous case to 
get a derivation r{x, a, IIpi) and apply the substitution [x/u] to to this derivation, using the procedure in 
Definition^ to get a derivation of 

Up; {B2[a2/x])p, . . . , (B„[a„/a;])/9 {Bo[aQ/x])p. 
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The derivation r{x, a, 77) is then constructed as follows 

\ Ep; (i?2[a2/x])p, . . . , {Bn[an/x])p •- {Bo[ao/x])p 



E]s[ai/x\ = t[ai/x\, . . . ,S„[a„/x] Bo[ao/a;] 

where each Up is constructed as explained above. 
9. If n ends with cC: 

n' 

Bi, . . . , Bj , Bj, . . . , Bn >- Bq ^ 
Bi, . . . ,Bj, . . . ,Bn Bo 

then r{x, a, 7T) is 

(flo, . . . ,aj,aj, . . . ,a„),n') 
Bi[ai/x\, . . . ,Bj[ajlx\,Bj[aj/x\, . . . ,B„[a„/a::] So[ao/x] 

Bi[ai/x\,. . . ,Bj[aj/x\, . . . ,-B„[o„/a;] Bo[ao/a;] 



cC 



10. If n ends with any other rule and has premise derivations Ui,..., i7„, then r{x,a,n) ends with the 
same rule and has premise derivations rix, a, IIi), . . ., r{x, a, Iln). 

Lemma 10. For any derivation U of S] F C and any multiset of S -formulas A, w{A, U) is a derivation 
of S-F,Ai-C and ht{w{A, 77)) < ht{n). 

Lemma 11. For any derivation U of S; F t- C and any S -substitution 9, Ud is a derivation of S9;F9 >- 

ce and ht{n9) < ht{n). 

Lemma 12. For any derivation 77 o/73i, . . . , 73„ i- Bq and permutations tt = ttq, . . . , 7r„, (7?}-77 is a deriva- 
tion of TTi.Bi, . . . , 7r„.7?„ I- ttq.Bq and /it((7f).77) < ht{n). 

Lemma 13. For any derivation 77 of S ^ x\ Bi, . . . , Bn >- Bq and any list of nominal constants a = oq, . . . , a„ 
.such that ai ^ .supp{Bi), r{x, a, U) is a derivation of E; Bi [ai/x], . . . , 73„[a„/a;] 7?o[ao/2^] o,nd ht{r{x, a, 77)) < 

ht{n). 

Lemma 14. Substitutions. Let 11 be a proof of E; F C and let 9 he a E -substitution. Then there exists 
a proof n' of E9]F9 C9 such that ht{n') < ht{n). 

Proof. Follows immediately from Lemma [TT] □ 

Lemma 15. Permutations. Let IT be a proof of E; Bi, . . . , B„ Bq. Then there exists a proof 11' of 
E-jTTi.Bi, . . . ,7r„.73„ ttq.Bq such that ht{n') < ht{n). 

Proof. Follows immediately from Lemma [T^ □ 
Lemma 16. Restricted name substitutions. Let 11 be a proof of 

E,x : l; Bi, . . . , Bn >- Bq. 

Then there exists a proof of 11' of E: Bi[ai/x], . . . , Bn[an/x] Bo[ao/x], where Oi ^ supp{Bi) for each 
i G {0, . . . , n}, such that ht{n') < ht{n). 

Proof. Follows immediately from Lemma [T^ □ 

The next two lemmas are crucial to the cut-elimination proof: they allow one to reintroduce the symmetry 
between \fC and \fTZ, and dually, between 3C and 3TZ rules. 
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Lemma 17. Support extension. Let U he a proof of S,h] F i- B[h a/x] where {a} = supp{B), h ^ S and 
h is not free in F and B. Let c be a list of nominal constants not in the support of B. Then there exists a 
proof n' of S, h'- F i- B[h' dc/x] where h' ^ S. 

Proof. Suppose c is the list of constants ci : ti , . . . , c„ : i„ . Let y = yi : ti , . . . , ?/„ : t„ be a list of 
distinct variables not appearing in U {h, h'}. We first apply the substitution [Xa.h' cx/h] to the sequent 
S,h;F I- B[ha/x]. By Lemma UM there is a proof LIi of 

^,h',y;F B[h' ay/x] 

The derivation LL' is then obtained by repeatedly applying Lemma to TTi to change y into c. □ 

Lemma 18. Support extension. Let LI be a proof of S,h] B[h a/x],F C where {a} — supp{B), h ^ S 
and h is not free in F , B and C . Let c be a list of nominal constants not in the support of B . Then there 
exists a proof LI' of S, h'; B[h' ac/x], F t- C where h' ^ S. 

Proof. Use the same construction as in the proof of Lemma 1171 □ 



4 Cut reduction 

We define a reduction relation between derivations, following closely the reduction relation in f3]. For 
simplicity of presentation, we shall omit the signatures in the sequents in the following reduction of cuts 
when the signatures are not changed by the reduction or when it is clear from context which signatures 
should be assigned to the sequents. The redex is always a derivation S ending with the multicut rule 



Bi 

S;Ai ^Bi 



Bn 

S;An • 



Bn S]Bi,. 



n 

.,Bn,F'-C 



IJ;Ai,...,An,F >-C 



We refer to the formulas i?i , . . . , Bn produced by the mc as cut formulas. 
If n = 0, S reduces to the premise derivation 77. 

For n > we specify the reduction relation based on the last rule of the premise derivations. If the 
rightmost premise derivation LI ends with a left rule acting on a cut formula Bi, then the last rule of Hi 
and the last rule of B together determine the reduction rules that apply. We classify these rules according 
to the following criteria: we call the rule an essential case when Bi ends with a right rule; if it ends with a 
left rule, it is a left- commutative case; if Hi ends with the id rule, then we have an axiom case; a multicut 
case arises when it ends with the mc rule. When H does not end with a left rule acting on a cut formula, 
then its last rule is alone sufficient to determine the reduction rules that apply. If B ends in a rule acting 
on a formula other than a cut formula, then we call this a right- commutative case. A structural case results 
when n ends with a contraction or weakening on a cut formula. If U ends with the id rule, this is also an 
axiom case; similarly a multicut case arises if B ends in the mc rule. 

For simplicity of presentation, we always show i — 1. 
Essential cases: 
AU/ AC: If Bi and B are 



Zii i- Z\i .- B'{ 
Ai'^ B[A B'l 



A7^ 



B' 

B'i,B2, . . . , Bn, F 



C 



B[ A B'{,B2, . ■ . , Bn,F 



C 



AC 



then reduces to 



Ai >-B[ A2'- B2 



Bn ^ n' 

An Bn B[, B2, . . . , Bn, F I 

Ai,...,An,F 



C 



13 



The case for the other /\C rule is symmetric. 



V7^/ V C: If TTi and 77 are 



n[ 77' n 



Ai t- B'l B[, B2, ■ ■ ■ , Bn, r I- C B'{ , B2, ■ ■ ■ , Bn, r c 

V7^ . , „ — t: vc 



Ar^B[WB'{ B[\/ B'{,B2,...,B„,r.-C 

then S reduces to 

n[ 7T2 iT„ n' 

A,^B[ A2'-B2 ■■■ A„'-Bn B{ ,B2,...,B^,r ^ C 

Ai,...,An,r 

The case for the other \/TZ rule is symmetric. 
D TZ/ D £: Suppose 11 1 and U are 



mc 



n'l n' n- 



II 



B[,Aii-B'{ B2, ■ ■ ■ , Bn, r t- B[ B'l , B2, ■ ■ ■ , Bn, r I- C 



z\i-b;db;' ^'^ B[DBiB2,...,Bn,r^c 

Let S'l be 

B^,...^B„,r^ B[ m 

TflC 

A2,...,Ar^,r ^ B[ B[,Ai ^ B'{ 

Ai,...,An,r >- B'{ 

Then S reduces to 



mc 



"1 



III I jj„ 

^B'{ ^^^^B,U^{2..r.} B'{,{Bi\,^{2..n},r^C 

777 n 

Ai,...,Ar„r,A2,...,A„,r^c ^ 

^^^^^^^^^^^^^^^^^^ c£ 

Ai,...,An,r^C 

We use the double horizontal lines to indicate that the relevant inference rule (in this case, cC) may need to 
be applied zero or more times. 

VTZ/VC: Suppose 11 1 and U are 

ni n' 

S,h-A^^B[[{hc)lx] E;B[[t/x],B2,...,Bn,r^C 

S-Ai'~\fx.B[ S;yx.B[,B2,...,Bn,r'-C , 

where {c} = supp{B[). Let {d} = supp{B[[t / x]) \ supp{B[). Apply Lemma flTl to get a derivation 77" of 
S,h';Ai I- B[[{h cd)/x]. The derivation S reduces to 



n^XBlt/h'] 77' 

E;Ai- B[[t/x] l^'^^i ^0 z6{2..n} ....-C 

S;Ai,...,A,,,r>-C "''^ 
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3TI/3C: Suppose IIi and 77 are 

n[ n' 

S-Ai '-B[[t/x] S,h;B[[{hc)/x],B2,...,B,„r C 

S;Ai>-3x.B[ S;3x.B[,B2,...,Bn,r>-C 

where {c\ = supp{B[). Let {(?}■ = supp{B[[t / x]) \ supp{B[). Apply Lemma [T51 to 77' to get a derivation 71" 
of S,h';Ai >- B[[{h' cd)/x]. Then E reduces to 

7T{ n"[Xcd.t/h'] 

S;Ai^ B[[t/x] ... S;B[[t/xlB2,...,r^C 

77? r 

S;Ai,...,A„,r^C 



WTZ/VC: Suppose 77i and 77 are 

ni 77' 

^1 ^^^K^] 73([b/x],...,7?„,7->-C 
Z\i.-Vx.Bj Vx.B[,...,Bn,r >- C . 

Apply the construction in Definition [5] to to 77( to swap a with h to get a derivation 77" of Z\i B'i\b/x\ 
reduces to 

n'{ n' 

Ai'^B'^lb/x] ... B[[b/x],...,Bn,r'-C 
A A 7=; n^c 

Ai,...,An,r>-c 

natTZ 



natTZ/natC : Suppose 77i is Ai ■- nat z and 77 is 



Then n reduces to 



w n" n'" 

>- D z Dj>-D{sj) D z,B2,...,B„,r i-C 
nat z, 7^2, • ■ • , Bn, F t~ C 



w{Ai,W) \ n 



Ai>-Dz .- BiJ D z,B2,...,Bn,r'~C 

Ai,A2,...,An,r^C 



mc 



natTZ/natC : Suppose 77i is 

A • nat I 

natIZ 



and 77 is 



Let ^1 be 



Ai I- nat (si) 



n' n" n'" 

-Dz Dj>-D{sj) D{sI),B2,...,Br„r^-C 

natC 



nat {sI),B2, . . . ,Bn,r t- C 



n' n" 

77^ >- Dz Dj>-D{sj) DI >- DI 

Ai t- nat I nat I t- D I 

7 'TIC. 

Ai I- D I 
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mc. 



Suppose {c\ = supp{I). We apply the procedures in Definition [7] and Definition [§] to 77" to obtain the 
derivation 11' of 

h;D{hc) ^ D{s{hc)). 

Let ^2 be 

n'[Xc.i/h] 

Ait-DI DI>--D{sI) 
Ai >-D{sI) 

Then S reduces to 

^2 7T2 n„ n'" 

Ai^DjsI) A2^B2 ... An'-Br, D{sI),B2,...,Bn,r^C 

Ai,...,A^,r^C 

eqC/eqJZ : If TJi and U are 

/ ng 
\se;re >- ce^ ^ 

eqT^ „ — — eq£ 



i:;ziii-t = f ^ x:;t = t,r >- c 

then S" reduces to 

i:;Z\2'-52 ... S;An'-Bn S;Ai,B2,...,B„,r 



S;Ai,...,A„,r^C 



mc 



where e is the empty substitution. 
defTZ/defC: Suppose 77i and U are 

n[ n' 

Ar ^ B[tlx\ B[t/x],B2,...,r>-C 

defn defC 

A^^pt ""^''^ pt,B2,...,r^C 

Then S reduces to 

n2 n„ n' 

Z^i ■- B[t/x] A2'-B2 ... An'-Bn B[t/x\. ...,r>-C 
Au...,A^,r^C 

Left- commutative cases: 

•C/ o C: Suppose U ends with a left rule other than cC acting on Bi and TTi is 

m 



A\ ^Bi 



•C 



Ai >- Bi 

where •£ is any left rule except D C, eq£, or natC. Then S reduces to 

ni { ] n 

A\>-Bi lA" ^jjje{2..n} Bi,...,B„,r >- C 

mc 

A\,A2,...,A^,r^C 

Ai,A2,...,A„,r.-C 
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D £/ o £: Suppose 11 ends with a left rule other than c£ acting on Bi and ili is 



n[ n'{ 



DC 



Let ^1 be 



n'l 772 7T„ 77 

D'{,A[>-Bi A2'-B2 ■■■ An'-Bn Bi,...,Bn,r '-C 

D'i,A\,A2,...,An,r^C 



mc 



Then ^ reduces to 



w{A2U...uA„ur,n[) Si 

A[,A2,...,A^,r^D[ D'{,A[,A2,...,An,r'-C 
D[DD'{,A[,A2,...,Ar,,r>-C 



D £ 



natC/ o £ : Suppose 77 ends with a left rule other than c£ acting on Bi and 77i is 



771 772 773 

-Diz Dij'- Di (s 3) Dil, A[ >- Bi 
nat I, A[ I- Bi 



nat£ 



Let Si be 



Then E reduces to 



nf 772 77„ n 

DlI,A[>-Bi A2'-B2 ... An'-Bn Bi,...,Bn'- C 
DJ,A[,A2,...,An,r>-C 

nl nl si 

•-Diz 7?ij .- Di(sj) DiI,A[,A2,...,A2,r'-C 



mc 



natI,A[,A2,...,An,r >- C 



nat£ 



eq£/ o £ : If 77 ends with a left rule other than c£ acting on Bi and 77i is 



77« 
A[e >- Bit 

s = t, A[ I- Bi 



eq£ 



then ^ reduces to 



77« 772^ ne 
A'lO'-Bie A2e'-B2e ... A^e'^B^e Bi0,...,B„e,ro >- ce 

A[0,A2e,...,Ane,re >- ce 



s = t, A[,A2,...,An,r^C 



Right- commutative cases: 
— / o £: Suppose 77 is 



[Bi, . . . , 73„ , 7"' 



C 



Bi,. . . , Bn, r t- c 



o£ 
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where oZ is any left rule other than D eq£, or natL (but including cC) acting on a formula other than 
Bi, . . . ,Bn. The derivation S reduces to 

ill Hn W 

Ai^Bi ••• An^Bn Bu...,Bn,r^ 



mc 



Ai,...,An,r'-C 



— / D £: Suppose 77 is 



Let El be 



and E2 be 



Then E reduces to 



77' 77" 
Bi,...,B^,r' .- D' Bi,...,Bn,D",r' >-C 

Bi,...,Bn,D' DD",r' -C 



7Ti 77„ 77' 

Z\l.-Bi ••• An'-Bn Bi,...,Bn,r' ^ D' 



Ai,...,A^,r' ^D' 



mc 



Til 
Ai-Bi 



Hn 77" 
Zi„-B„ Bi,...,Bn,D",r' -C 



Au...,An,D",r' 



Ai,...,A^,r' ^ D' . . . , An g", r'^c 

Ai,...,An,D' Z)D",r' y-C 



mc 



—/natC : Suppose 77 is 



IT' n" n'" 

>-Dz Dj>-D{sj) Bi_,...,Bn,DI,r' >- C 
Bi,...,Bn,natI,r' C 



natC 



Let ^1 be 



then ^ reduces to 



77i Hn n'" 

Ai^Bi ... An'-B^ Bi,...,Bn,DI,r' '-C 

Ai,...,An,DI,r' 



mc. 



77' n" "1 

~Dz Dj^-Djsj) Ai,...,Ar^,DI,r '-C 
Ai,...,An,natI,r' >- C 



natC 



-/eq£: If H is 



then E reduces to 



Bip,...,BnP,rp^Cp 

Bu...,Bn,s = t,r' 



eq£ 



HiP 
Aip >- B. 



ie{l..n} 



np 

Bip,...,r'p^Cp 



Aip,...,Anp,r'p >- Cp 

Ai,...,An,s = t,r' >- C 



mc 



eq£ 
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-/ oTZ-.Un is 



Bi,. . . , Bn, »- C" 
-Si, ... , Bn, r t- c 

where oTZ is any right rule, then E reduces to 



on 



Hi 



mc 



Au...,An,r^c 



on 



Multicut cases: 



mc/ o C: If n ends with a left rule other than cC acting on Bi and iTi ends with a multicut and reduces to 
n[, then S reduces to 

n'l 772 Hn n 

Ai^Bi Z\2-S2 ••• ^„.-B„ Bi,...,Bn,r^C 



Ai,...,An,r^C 



mc 



-/mc: Suppose J7 is 



n' 

{-^■'}je{i..m}){-B,}i£/',-r" •- C 



Bu...,Bn,r\...,r^,r' 



mc 



where 7^, . . . , I™, I' partition the formulas {-Bi}ig{i..„} among the premise derivations Ui, . . . , 11^,11' ■ For 
1 <j <m\ei be 



Then E reduces to 



XAi^Bil 



{B,}iei,,ri '-D^ 



mc 



{....- 7)j}jG{l..m} {a'-'sJ 



ier ... t- C 



A,,...,An,r\...r"',r' 



mc 



Structural case: 



-/c£: If n is 



then S reduces to 



77' 

73i , 7?i , 7?2 , . . . , Bn ,rt-C 
Bi,B2, . . . , Bn, r t- C 



ill 
Ai '-Bi 



Hi 
Ai >- B, 



cjC 



n' 



ie{l..n} BuBi,B2,...,Bn,r'-C 



Ai,Ai,A2,...,An,An,r >- C 
AuA2,...,An,r >- C 



mc 
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Axiom cases: 



idTr/ o £: Suppose 71 ends with either natC or cq£ on Bi and TTi ends with the id-^ rule: 



id-jr 



Then it is the case that B = tt^ ^.'K2.Bi. Apply the construction in Definition [S] to 77 to get a derivation II' 
oi B, B2, ■ ■ ■ , Bn, r C. The derivation S reduces to 

7T2 77„ w{A'^,n') 

A2'-B2 ■■■ An'^Bn B , A[, B2, . . . , B„, T ^ C 

mc 

B,A[,A2,...,A,„r'-C 



—/idT^: If 7T ends with the idj^ rule with a matching formula in 7^, i.e., there exists C ^ F such that 
n.C — tt'.C for some permutations tt and vr', then then S reduces to 

A,,...,An,r.-c 

If TT ends with the id-n rule but C docs not match any formula in 7^, then C must match one of the cut 
formulas, say 7?i, i.e., there exists permutations vri and 112 such that tti.Bi — it2-C. That is, C = tt^^.tti.T?!. 
In this case, we first apply the permutation ttj^^.tti to 7Ti according to the construction in Definition [8] to 
get a derivation 77( of Ai >- 7r^^.7ri.73i. S then reduces to w{A2 U . . . U Z\„ U 7^, 77(). □ 
An inspection of the rules of the logic and this definition will reveal that every derivation ending with a 
multicut has a reduct. Because we use a multiset as the left side of the sequent, there may be ambiguity as 
to whether a formula occurring on the left side of the rightmost premise to a multicut rule is in fact a cut 
formula, and if so, which of the left premises corresponds to it. As a result, several of the reduction rules 
may apply, and so a derivation may have multiple reducts. 



5 Normalizability and reducibility 

We now define two properties of derivations: normalizability and reducibility. Each of these properties im- 
plies that the derivation can be reduced to a cut-free derivation of the same end-sequent. In the following, 
substitutions mean Z'-substitutions for some signature S. The definitions are similar to those by McDowell 
and Miller [3]. However, since the cut reduction in our case involves several transformations of derivations, 
other than substitutions and weakening, we need to build this transformations into the definitions of nor- 
malizability and reducibility. 

Definition 19. A height-preserving (HP) transformation T is a finite sequence of transformations J-i, . . . ,J-r 
where each Ti is one of the transformations described in Definitions^ Definition^ Definitions^ and Defini- 
tions^ The number n is the order o/T. The application of T to 11 is defined as follows: 

To (77) = 77 

Tin) = Tn{n) 

Note that a height-preserving transformation may not be defined for all derivations, and that it may be the 
identity transformation (i.e., it does nothing). Height-preserving transformations are ranged over by T, JT, Q 
and H.. 

Lemma 20. Let T be a height-preserving transformation. For any derivation 77, if T{n) is defined, then 

ht{T(n)) < ht{n). 
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Definition 21. We define the set o/normalizable derivations to be the smallest set that satisfies the following 
conditions: 

1. If a derivation 11 ends with a multicut, then it is normalizable if for every height-preserving transforma- 
tion T such that T{n) is defined, there is a normalizable reduct of T{n) . 

2. If a derivation ends with any rule other than a multicut, then it is normalizable if the premise derivations 

are normalizable. 

These clauses assert that a given derivation is normalizable provided certain (perhaps infinitely many) other 
derivations are normalizable. If we call these other derivations the predecessors of the given derivation, 

then a, derivation is normMizable if and only if the tree of the derivation and its successive predecessors is 
well-founded. In this case, the well-founded tree is called the normalization of the derivation. 

The set of normalizable derivations is not empty; the cut-free proofs, for instance, are normalizable. 

Since a normalization is well-founded, it has an associated induction principle: for any property P of 
derivations, if for every derivation iT in the normalization, P holds for every predecessor of 11 implies that 
P holds for 77, then P holds for every derivation in the normalization. 

Lemma 22. // there is a normalizable derivation of a sequent, then there is a cut-free derivation of the 
sequent. 

Proof. Let iJ be a normalizable derivation of the sequent F B. We show by induction on the normalization 
of n that there is a cut-free derivation of F >- B. 

1. If 77 ends with a multicut, then any of its reducts is one of its predecessors and so is normalizable. One 
of its reduct, via the empty transformation, is also a derivation oiF *- B, so by the induction hypothesis 
this sequent has a cut-free derivation. 

2. Suppose 77 ends with a rule other than multicut. Since wc arc given that 11 is normaUzable, by definition 
the premise derivations are normalizable. These premise derivations are the predecessors of 11, so by the 
induction hypothesis there are cut-free derivations of the premises. Thus there is a cut-free derivation of 
r .- B. 

□ 

The next four lemmas are also proved by induction on the normalization of derivations. 

Lemma 23. If U is a normalizable derivation, then for any substitution 6 such that 116 is defined, 116 is 

normalizable. 

Lemma 24. If 11 is normalizable, then for any multiset of formulas A, ifw{A,n) is defined, then w{A, 11) 
is normalizable. 

Lemma 25. If 11 is normalizable, then for any permutations w such that {t().FI is defined, {Tf).n is nor- 
malizable. 

Lemma 26. 7/77 is normalizable, then for any nominal constants a such that r{x, a, 11) is defined, r{x, a, U) 

is norm,alizable. 

Lemma 27. If 11 is normalizable, then for any height-preserving transformation T such that T[II) is de- 
fined, T{II) is normalizable. 

Definition 28. The level of a sequent F *- C is the level of C. The level of a derivation 11 is the level of 
its root sequent. 

The definition of rcducibility for derivations is done by induction on the level of derivations: in defining 
the rcducibility of Icvcl-i derivations, we assume that the rcducibility of derivations of level j, for all j < i 
is already defined. In the following definition, when we apply a transformation T to a derivation 11 of 
Bi, . . . , Bn I- Bq, vie use the notation T{Bi) to denote the formula in the root sequent of T{n) that results 
from applying the transformation to Bi. 
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Definition 29. Reducibility. For any i, we define the set o/ reducible i-level derivations to be the smallest 
set of i-level derivations that satisfies the following conditions: 



1. If a derivation 11 ends with a multicut then it is reducible if for every height-preserving transformation 
T such that T(i7) is defined, there is a reducible reduct ofT(n). 

2. Suppose the derivation ends with the implication right rule 

n 



r >- bdc 



Then the derivation is reducible if U is reducible and for every height-preserving transformation T such 
that T{n) is defined, multiset of formulas A and reducible derivation U' of A*- B' , where B' = T{B), 
the derivation 

n' nn) 

A>-B' B',r'>-C' 
; : ™c 

A, r' >- c 

is reducible. 

3. If the derivation ends with the implication left rule or the nat rule, then it is reducible if the right premise 

derivation is reducible and the other premise derivations are normalizable. 
4- If the derivation ends with any other rule, then it is reducible if the premise derivations are reducible. 

These clauses assert that a given derivation is reducible provided certain other derivations are reducible. If 
we call these other derivations the predecessors of the given derivation, then a derivation is reducible only if 
the tree of the derivation and its successive predecessors is well founded. In this case, the well founded tree 
is called the reduction of the derivation. 

Lemma 30. // a derivation is reducible, then it is normalizable. 

Proof. By induction on the reduction of the derivation. □ 

Lemma 31. // a derivation U is reducible, then for any height-preserving T such that T{n) is defined, 
T{n) is reducible. 

Proof. By induction on the reduction of 7T and Lemma [27l 



6 Cut elimination 

In the foUowing, when we mention T(7T) we assume impHcitly that it is defined. We shall also use the 
notation B_j- to denote T{B), that is the application of the transformation to the formula B. Similarly, the 
multiset will be written Aq-. We drop the subscript T if it is clear from context which transformation 

we refer to. 

Lemma 32. For any derivation U of S; Bi, . . . , _B„, F >- C and reducible derivations TTi, . . . , Tin of S; Ai 
Ci, . . . , S; A„ C„, where n > 0, and for any transformations Ti, . . . , %i, T such that Ti^TIi) is defined and 
Ti{Ci) ~ T[Bi), the derivation E 

TiiBi) Tnin„) Tin) 

A\^ t- B\^ ... S'; An^ ' Bn^ S': Bi^, . . . , -Bkt-, jZr ' Q.T 

i J mc 

S ; Ti ' ■ ■ ■ ' ^"7^. ' £t 

is reducible. 
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Proof. The proof is by induction on ht{n) with subordinate induction on n and on the reductions of 
ill, ■ • ■ , Iln- Since the proof does not depend on the order of the inductions on reductions, when we need to 
distinguish of one the TT^'s we shah refer to it as TTi without loss of generahty. 

We need to show that for every T', the derivation every reduct of is reducible. If n = then 

T'(S') reduces to T'{T{n)). Since reducibility is preserved by height-preserving transformation, it suffices 
to consider the case where T and T' are the identity transformation, that is, we need only to show that 77 is 
reducible. This is proved by case analysis on the last rule of 77. For each case, the results follow from the outer 
induction hypothesis and Definition 1291 The case with D TZ requires that height-preserving transformations 
do not increase the height of the derivations (see Lemma [^D|) . In the cases for D C and natC we need the 
additional information that reducibility implies normalizability (see Lemma [50)1 . 

For n > 0, we analyze all possible reductions that apply to T'{E) and show that every reduct of T'{S) 
is reducible. We suppose that T'{S) is of the following form: 

^i(ifi) :F„{n„) T{n) 

-A. A 

where = . In several cases below, we often omit the subscripts J- or Ti when it is clear from context 
which transformations we refer to. We also often switch between Bj^ and Ci^ to make the inference figures 
more readable. 

Most cases follow immediately from the inductive hypothesis and Definition [59] and Lemma[3Dl Lemmal^ 
and Lemma [20l We show here the interesting cases. 



D 7?./ D £: Suppose 77i and 77 are 



n'l n' n" 

Ai,B[^B'{ B2,...,r.-B[ B'{,B2,...,r^C 

— ^ /V' T~t/l I 1 , , , , 3) 



Ai^B[^ B'{ B[D BI, B2, . . . , S„, r^C 

Let Si be the derivation 

^2(7^2) MBn) ^n{n') 

A2'-B2 ... An'-Bn B2, . . . , Bn, L ^ B[ 

mc 

A2,...,An,r^ B{ 

Then Ei is reducible by induction hypothesis since J- and J-i preserve reducibility (Lemma I3ip and do not 
increase the height of derivations (Lemma [^D]). Since we are given that 77i is reducible, by Definition [211 the 
derivation S2 

A2,...,An,r'- B[ B[,Ai'-Bl 

7, "ic 

Ai^,...,An,r'- Bl 

is reducible as well. Therefore, the reduct of T'{S) 



B'l L^-^J,e{2..n} S£,{B,},e{2..„},Z:-C 

Ai,...,An,r,A2,...,An,r^c ~ 



mc 



Ai,...,An,r^c 

is reducible by the outer induction hypothesis and Definition [ 
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yiZ/VC : Suppose TTi and 77 are 

n[ n' 

E,h;Ai I- B[hc/x] S; B[t/x], B2, . . .,Bn,r ■- C 

S-Ai i- \fx.B ^'^ S;yx.B,B2,...,B„,r>-C 

Applying the transformation J-i to Ui (and similarly, J-' to 77) might require several transformation be done 
on the premise of the derivation, e.g., to avoid clashes of nominal constants, etc., so let us suppose that 
J-"i(77i) and J^{n) are of the following shapes: 

Qiin'i) g{n') 

2J',h;Ai ■- D[h'd/x] S';D[s/x],B2,...,Bn,r'-C 
E';Ai'- Vx.D '^'^ S'-yx.D,B2,...,Bn,r'-C '^^ 

where Vx.7? = Vx.B and D[s/x] — B[t/x]. If the support of D[s/x] is larger than {d}, then the reduction 
rule for V7?,/V£ requires further transformations be applied to Qi{n[), i.e., as is described in Lemma \T7\ So 
let us suppose that this transformation is applied, resulting in a derivation 

S',f;Ai>- D[fe/x] . 

Then T'{E) reduces to 

g[{n[)[Xe.s/f] ^2(7^2) ^„(7r„) gm 

S':Ai>- D[s/x] A2'-B2 ... ^ >- B2 S'; D[s/x], C 
S';Ai,...,An,r'-C 

which is reducible by the outer induction hypothesis. 



mc 



natTZ/natC : Suppose 77i and 77 are 

n{ n' n" n'" 

A^^natM ^Dz D 3 D {s j) D {s M), B2, . . . , Bn, T >- C 

Ai'- natM """-^^ nat{s I),B2, . . . ,Bn,r >- C 

then Ti (77i ) and J-{n) are 

T,{n[) n' n" Hn'") 

Ai>-natl '-Dz D j D {s j) D {s I), B2, . . . , Bn_, £>- C 

Ai^natl ""^''^ nat{sI),B2,...,B^.,r^C 

Note that the derivations 77' and 77" are not affected by the transformation since 7) is a closed term with 
no occurrences of nominal constants and j in 77" is a new eigenvariable. Let Si be the derivation 



n' n" 



id-,: 



Ti{n[) Dj^Djsj) DI^DI ^^^^ 

Ai t- nat I nat I t- D I 



Ai>- DI 



mc 



Since the height of the right premise is no larger than ht{n), and 77{ is a predecessor of 77i, Si is reducible 
by induction on the reduction of 77i. Let {c} be the support of 7. We construct the derivation 77* of 
h;D (he) I- D {s {he}) from 77" using the procedures described in Definition [7| and Definition [51 Let S2 be 



Hi n'[Xc.I/h] 

Ai'-DI DI>-D{sI) 

— mc. 



Ai*- D{s I) 
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Since ht{n*[Xc.I/h]) < ht{II"), by the outer induction hypothesis, ^2 is also reducible. Therefore the reduct 

Mn^) ^„(7T„) T{n'") 

Ai>-D{sl) A2'-B2 ... An'-Bn D{sI),B2,...,r'-C 

A A 7^ 'T^C 

Ai^,...,A2,r^ c 
is reducible by the outer induction hypothesis. 



eq£/ o C : Suppose TTi is 



then Ti {III ) is 



AiO i- Bit 
s = t,Ai'- Bi 



Ai9 i- Bif. 



s^t,Ai >- Bi 



eq£ 



where each 11*^ is obtained from some 77^ by the transformations described in Definition [6l Definition [71 
Definition [8] and Definition [9l We denote with f{p) the substitution 9 such that U'p is constructed out of 
7T^ Thus we can write each U'^ as the derivation J^p^U^^''^) for some transformation jTp. The reduct of 



A'lP t- Bip A2P »- B2P 



Tn{nn)p Hn)p 

Anp I- BnP Bip, . . . , BnP, Bp •- Cp 



A'lP, A2P, AnP, Bpt- Cfi 



s = t, A[,A2,...,An,r^C 



eq£ 



Each premise derivation of the above derivation is reducible by the induction hypothesis on the reduction of 
TJi, since each nf^P^ is a predecessor of TTi. The reduct of T'{^) is therefore reducible by Definition [29l 



-/ D TZ : Suppose 77 is 



then J^i(7T) 



^(77') 

Bi, . . . , Bn, r, Ci t- C2 

Bi, . . . , Bn, r Cl D C2 



Bi , . . . , Bn, -T, Ci ' C2 
Bi,. . . ,Bn,r_*- Ci D C2 



D 7^ 



D 7^ 



Let be 



Ai >- Bi 



An Bn Bi, . . . ,Bi,r_,Ci I- C2 



Ai,...,An,Ci'-C2 

which is reducible by the outer induction hypothesis. Let S2 be the derivation 



Ai,...,An,r,Ch^C2 

Ai,...,An,r^CiDC2 



D 7^ 
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which is the reduct of T'(^). To show that ^2 is reducible, we need to show that for any T", and for any 
derivation 77" of A 1- D, where D — T"(Ci), the derivation S3 

n" ^"(^2) 

A^D D,Ai_g^,...,A^^^,rg^C2g 

TTIC 

is reducible. Here the transformations Qi and Q are transformations associated with the premise derivations 
in T"(S'2). ^3 is reducible if for any transformation H, every reduct of the derivation 7i(S'3) is reducible. 
The reduct of 0.(^3) in this case is: 

H'in") Hi(7Ti) H„(i7„) n"{n') 

A>-D Ai>-Bi ... An'-Bn D,Bi^,...,Bn,r>-C2 

A,Ai,...,An,r^C2 """^ 

where Hi, . . . , Tin and H" are transformations applied to the premises of 7i{T" {S2)) and H' is the transfor- 
mation applied to the left premise of H^S^). This derivation is reducible by the outer induction hypothesis. 

□ 

Corollary 33. Every derivation is reducible. 

Proof. This result follows immediately from Lemma [32] with n = 0. □ 
Theorem 34. The cut rule is admissible in LG^ . 

Proof. Follows immediately from Corollary [33l Lemma [30] and Lemma [22] □ 
Corollary 35. The logic LG^ is consistent, i.e., it is not the case that both A and A D -L are provable. 

7 Correspondence between LG and FOX^ 

We now show that the formulation of LG is equivalent to FOX^ extended with the axiom schemes of name 
permutations and weakening: 

VxVy.BxyZ>VyVx.Bxy and B = Vx.B (2) 

where x is not free in B in the second scheme. 
Sequents in FOX^ are expressions of the form 

Z:;ait>Bi,...,an>Bn ctq > Bq. 

S is the .signature of the sequent, cTi is a list of variables locally scoped over Bi, and is referred to as local 
signature. The expression cr^ > Bi is called a local judgment, or judgment for short. In [8], local judgments 
are considered equal modulo renaming of their local signatures, e.g., {a,b) > P ab is equal to (c, d) > P cd. 
Local judgments are ranged over by scripted capital letters, e.g., B, V, etc. For the purpose of proving the 
correspondence with LG, however, we will make this renaming step explicit, by including the rules: 

yt>B',r>-C , r>-y>B' 

The inference rules of FOX^ are given in Figure [2] 

We now consider the correspondence between LG with FOX'^ extended with the following axiom schemes: 

VxVj/.i? xy = VyVx.B x y. (3) 
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E\ai> B,r ai> B 



S;A--B S;B,r--C 
id F — A — 'P: 7; cut 



E;a> B,a>C,r V E;r'-(j>B E;r'-a>C 

E-Gt>B hC,r '^V E;r at>B AC 

i;;af>B,r >-V E;a>C,r>-V E-r>-a:>B 

— ■ ■ ■ ■ V£ ■ VTl 

E;at>B\/ C,r i-V E; F a t> B \J C 

E;r •-a^C 
-L£ TTT^ FT— V7^ 



E;at> ±,r B E-.r •-at'BwC 

E;r>-at>B E;cri>C,r ^-V E; a > B, T a t> C 

E-a>B D C,r •-V ^ E-r a>B Z) C ^ 

E,aht:'y E\a > B[t/ x], F >- C E, h; T t~ a > B[(h a)/x] 

E;a>'^jX.B,r ^ C '^^ E-r>-ai>Vx.B '^'^ 

E,h;crc> B[{h a)/x],r •- C E,a\-t:j E; T •- a t> B[t/x] 

E;a>3x.B,r C E;r •-ai>3^x.B 

E;{a,y)>B[y/x],r^C E; T ^ {a,y) > B[y/x] 

V£ V7? 

E;at>Vx B,r C E-F^o^VxB 

E;B,B,r^~C E;r^~C 

E-B,r •-C '^^ E;B,r •-C E;r •-a^T 



Fig. 2. The core inference rules of FOX^ . 

B = Vx.-B, provided that a; is not free in B. (4) 
We can equivalently state these two axioms as the following inference rules: 

{x,b,a,y)t> B,r >- C F ^ {x,b,a,y) i> B 

(x, a,b,y) t> B, r I- C F i- (x, a, b,y) > B 

{x,a,y)>B,F C ^ r- -1 Ft-{x,a,y)>B ^ r- -1 

— 7— — ssL, a ff: ]x,yl ; — — ss t. a ff: \ x,yy 

(xy)>B,F'-C ' F^{xy)>B - ^ x ' 

{xy)>B,F^C F^{xy)^B 

wsL, a f. supp(B) — — ssit, a f. supp[B) 



{x,a,y)> B,F t~ C F t- {x,a,y)\> B 

Implicit in the above rules is the assumption that variables in local signatures are considered as special 
constants, much like the nominal constants in FG. The support of B, within a local signature cr, is defined 
similarly as it is in FG: it is the set {a & a \ a occurs in i?.}. 

The logical system with the inference rules in Figure [2] together with an, ac, pC, pTZ, ssC, ssTZ, wsC 
and wsTZ is referred to as FOA^+. In relating FG and FOX^~^, we map the local signatures to nominal 
constants, and vice versa. In the following, given a formula B, we assume a particular enumeration of the 
nominal constants appearing in B based the left-to-right order of their appearance in B. 

Lemma 36. // the sequent S; Bi, . . . , Bn Bq is provable in FG then the sequent 

S; ci > Bi,Cn > Bn >- co> Bo 
where Ci is an enumeration of supp{Bi), is provable in FOX^^. 

Proof. Suppose that 77 is a proof of S: Bi, . . . , Bn >- Bq. We construct a proof 77' of 

S; ci> Bi,Cn> Bn >- cq> Bo 
by induction on ht(n). We consider some interesting cases here: 
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— Suppose n ends with zrf,r : 



The permutations tt and tt' can be imitated by a series of renaming (a^ and ac rules). The derivation 

n' is therefore constructed by applying a scries of aj^, a^, followed by the id rule. 
Suppose n ends with D 7^ : in this case we suppose that Bq = C D D. 

ill 

Bi, . . . ,B„,C I- D 



Bi,...,Bn'-CD D 
By induction hypothesis we have a derivation 772 of 

ci> Bi, . . . ,Cn> Bn ,a>C t- b> D 

We first have to weaken the signatures a and d to cq before applying the introduction rule for D. That 
is, 77' is the derivation 

7T2 

ci Bi , . . . , c„ > Bn ,d>C I- b> D 
^^^^^^^^^^^^^^^^^^^^^^^^ * 

Cit> Bi, . . . ,Cn> Bn, Co\>C I- Cot> D ^ 
Ci> Bi, . . . ,Cn> Bn I- Co> C D D 

Here the star '*' denotes a series of applications of wsjC, wsTZ, pC and pTZ. 
Suppose 77 is 

Br,...,Bn'-C[t/x] 



Bi,...,Bn'-3x.C 



3n 



It is possible that t contains new constants that are not in the support of C. Suppose d is an enumeration 
of the support of C[t/x]. The derivation 77' is constructed as follows 



n2 

ci > Bi, . . . ,c„ >-B„ •- d> C[t/x] 



3TZ 



Cl\> Bi, . . . ,Cn> Bn >- d>3x.C 
_ _ _ * 

Ci > Bi, . . .,Cn> Bn ■- Co t> 3x.C 

where 772 is obtained from induction hypothesis applied to 77i, and the rule '*' denotes a series of 
applications of ssTZ (for introducing new constants) and pTZ (for rearranging the order of the local 

signature). 

— For other cases, the construction of 77' follows the same pattern as in the previous cases, i.e., by induction 
hypothesis, followed by some rearranging, extension, or weakening of local signatures. 

□ 

Lemma 37. If the sequent 

E; ci o Bi.Cn > Bn Co > -Bo 
is provable in FOX^^ then the sequent S;B\,..., Bn Bq is provable in LG 

Proof. Suppose 77 is a derivation of 

Ci > Bi, ...,Cn>Bn I- Co > Bo 

We construct a derivation 77' of 7?i , . . . , 7?„ i- 73o by induction on ht{n). We show here the interesting cases; 
the other cases follow immediately from induction hypothesis: 



28 



If n ends with id, TTZ, or _L£ then 77' ends with the same rule. 
Suppose n is 

Hi 

Ci> Bi, . . . ,Cn> Bn d> B 



Ci > Bi, . . . , C„ > Bn Co t> So 



By induction hypothesis, there is a derivation 7T2 of Si, ... , Bn B. To get 77' apply the procedure in 
Definition [8] to 7I2 to rename B to Bq. 
Suppose 77 is 

Bi 

Ci i?i , . . . , c„ > B„ I- cq > C[(/i Co)/a;] 



ci i> 73i , . . . , c„ i> Bn Co » Vx.C 



V7^ 



By induction hypothesis, there is a derivation 7T2 of 7?i, . . . , 73„ 1- C[{h co)/x]. Suppose {d} = supp{C). 
Then 77' is 

7r2[Aco./i'd//i] 
Bi,...,Bn'- C[h'd/x] 
Si,...,B„ Vx.C ^''^ 

— If 77 ends with 3C, apply the same construction as in the previous case. 

□ 

Theorem 38. Let F be a formula which contains no occurrences of nominal constants. Then F is provable 
in FOX^ extended with the axiom schemes B = Vx.B and VxVy.Bxy D WyVx.B x y if and only if F is 
provable in LG. 
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